diff options
| author | Roland Shoemaker <roland@golang.org> | 2022-03-28 18:41:26 -0700 |
|---|---|---|
| committer | Michael Knyszek <mknyszek@google.com> | 2022-07-12 15:20:21 +0000 |
| commit | 58facfbe7db2fbb9afed794b281a70bdb12a60ae (patch) | |
| tree | f2ef77981d1ddf6a7a1c085f01b59656231d0901 /CONTRIBUTING.md | |
| parent | ed2f33e1a7e0d18f61bd56f7ee067331d612c27e (diff) | |
| download | go-58facfbe7db2fbb9afed794b281a70bdb12a60ae.tar.gz go-58facfbe7db2fbb9afed794b281a70bdb12a60ae.zip | |
[release-branch.go1.17] encoding/xml: use iterative Skip, rather than recursive
Prevents exhausting the stack limit in _incredibly_ deeply nested
structures.
Fixes #53711
Updates #53614
Fixes CVE-2022-28131
Change-Id: I47db4595ce10cecc29fbd06afce7b299868599e6
Reviewed-on: https://team-review.git.corp.google.com/c/golang/go-private/+/1419912
Reviewed-by: Julie Qiu <julieqiu@google.com>
Reviewed-by: Damien Neil <dneil@google.com>
(cherry picked from commit 9278cb78443d2b4deb24cbb5b61c9ba5ac688d49)
Reviewed-on: https://go-review.googlesource.com/c/go/+/417068
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Heschi Kreinick <heschi@google.com>
Run-TryBot: Michael Knyszek <mknyszek@google.com>
Diffstat (limited to 'CONTRIBUTING.md')
0 files changed, 0 insertions, 0 deletions